Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File: Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier: NozxSNjvlTIzeNwQdsjCnEsUx9XbrM0JhqbFCH2zCkU=
Subject key identifier: 60:95:96:D4:94:1C:F3:FF:33:68:AB:B2:14:17:AF:0C:DE:98:8C:31
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 01968E82E1D2145F6ED7A1F8D6BC2EC5C596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number: 09A8
Signing time: Fri 02 May 2025 01:01:04 +0000
Manifest this update: Fri 02 May 2025 01:01:04 +0000
Manifest next update: Sat 03 May 2025 01:01:04 +0000
Files and hashes: 1: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: gqaUlvj18oY8UmqPkMdLBIMGnfsOI04h4UwPPgi16GM=)
2: rqFwpW6hygA3WlEvpR2r2eLIqwU.roa (hash: hJKMm6stZaqD+/5F5Zq5RhHhs3I7m3K3YzZ93XXb5tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:e1:d2:14:5f:6e:d7:a1:f8:d6:bc:2e:c5:c5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: May 2 01:01:04 2025 GMT
Not After : May 3 01:01:04 2025 GMT
Subject: CN=609596d4941cf3ff3368abb21417af0cde988c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:22:6e:11:84:b8:d6:56:4f:de:4e:3d:1b:
20:57:ba:eb:f0:16:ea:d8:03:df:8a:7e:32:68:43:
c5:f5:09:63:c4:4c:4a:50:a4:0f:b5:68:24:b5:d4:
3d:21:9b:0d:e9:d5:33:56:a7:15:19:76:6a:89:c8:
03:ff:55:61:6f:ec:db:ed:85:d5:da:3d:24:fb:d8:
a0:39:97:1c:cb:79:af:9e:12:9d:fa:10:43:26:19:
eb:68:e4:fa:a0:45:13:9a:96:d7:39:25:c1:8a:12:
5b:db:c1:c9:06:28:4d:7f:d5:b9:0c:e2:12:58:37:
4c:35:b6:d6:d8:03:d0:df:84:2a:a6:d7:e7:52:e7:
cd:3e:a0:42:b0:cd:25:2c:ca:a0:59:ba:6e:fa:7d:
af:05:77:cf:51:25:fd:47:47:40:ea:5a:df:4a:79:
82:3a:d2:6a:35:0f:c0:ed:f4:db:cc:72:0e:da:ee:
41:14:bc:45:7c:c3:5c:6f:62:8f:38:dc:46:e3:d2:
f3:a5:db:f0:8a:18:7a:d3:9d:9d:d7:da:54:bb:fe:
cc:14:9a:af:fb:01:b3:1b:c5:48:d1:ec:f8:30:e3:
9c:32:fe:f0:d4:5d:b2:0d:03:0c:bc:58:2b:60:47:
23:45:bf:ba:ad:73:54:1a:f5:77:c9:43:8c:00:a0:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:96:D4:94:1C:F3:FF:33:68:AB:B2:14:17:AF:0C:DE:98:8C:31
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e3:89:86:45:3d:f8:34:8d:5c:1a:de:de:1f:6b:4d:b9:6d:
01:71:f2:43:eb:cc:1b:e1:65:56:34:76:ca:81:f4:ef:ad:5b:
fb:b0:d0:d7:a3:2e:6f:94:89:b1:20:df:39:94:e2:aa:e1:e0:
72:f8:2e:0b:b3:d0:30:f9:c2:53:95:00:0a:7b:3d:71:e9:bf:
01:cc:c8:a3:47:bb:88:d9:36:d6:f0:63:cc:c1:21:96:ec:5d:
05:25:38:d4:9d:52:16:5f:2e:ba:d8:ea:97:42:07:15:bc:60:
e6:7b:e7:88:7f:65:6d:58:c2:e4:71:e3:56:f9:3b:62:b4:8a:
9a:0d:39:20:b2:ad:62:bf:21:0c:8d:da:ed:ad:c5:1d:69:23:
a4:ec:3a:69:67:cd:0a:08:87:73:a0:39:31:27:9d:13:5a:d9:
bc:3d:6a:a0:ab:ab:f0:7c:f6:a5:d6:fc:93:f5:62:fb:c1:dd:
8a:23:24:ef:a7:3f:86:ca:28:5d:47:da:c6:e3:16:ea:c8:df:
dd:0b:a0:e7:04:c6:3e:d2:3d:09:5a:8e:78:e1:ef:8d:64:ee:
6c:42:42:be:f7:f1:71:71:03:d1:b7:aa:5e:da:d5:c5:72:aa:
02:73:e9:74:0e:8d:a5:3f:79:7a:19:5c:21:6a:ac:46:9f:3f:
d7:2b:32:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOguHSFF9u16H41rwuxcWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWFjMzg4NzgxMjdjZWNkYzRjODNlYTY5ZWVlMWY0ZTEx
OGJjZmYwHhcNMjUwNTAyMDEwMTA0WhcNMjUwNTAzMDEwMTA0WjAzMTEwLwYDVQQD
Eyg2MDk1OTZkNDk0MWNmM2ZmMzM2OGFiYjIxNDE3YWYwY2RlOTg4YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO0ibhGEuNZWT95OPRsgV7rr8Bbq
2APfin4yaEPF9QljxExKUKQPtWgktdQ9IZsN6dUzVqcVGXZqicgD/1Vhb+zb7YXV
2j0k+9igOZccy3mvnhKd+hBDJhnraOT6oEUTmpbXOSXBihJb28HJBihNf9W5DOIS
WDdMNbbW2APQ34QqptfnUufNPqBCsM0lLMqgWbpu+n2vBXfPUSX9R0dA6lrfSnmC
OtJqNQ/A7fTbzHIO2u5BFLxFfMNcb2KPONxG49Lzpdvwihh6052d19pUu/7MFJqv
+wGzG8VI0ez4MOOcMv7w1F2yDQMMvFgrYEcjRb+6rXNUGvV3yUOMAKCQYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCVltSUHPP/M2irshQXrwzemIwxMB8GA1UdIwQY
MBaAFEOaw4h4Enzs3EyD6mnu4fThGLz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNjYwOWYtMjcwMC00OTQ5LThkYmUt
YmFlMWY3N2JhNzU4LzEvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNjYwOWYtMjcwMC00OTQ5LThkYmUtYmFlMWY3N2JhNzU4
LzEvUTVyRGlIZ1NmT3pjVElQcWFlN2g5T0VZdlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+OJhkU9
+DSNXBre3h9rTbltAXHyQ+vMG+FlVjR2yoH0761b+7DQ16Mub5SJsSDfOZTiquHg
cvguC7PQMPnCU5UACns9cem/AczIo0e7iNk21vBjzMEhluxdBSU41J1SFl8uutjq
l0IHFbxg5nvniH9lbVjC5HHjVvk7YrSKmg05ILKtYr8hDI3a7a3FHWkjpOw6aWfN
CgiHc6A5MSedE1rZvD1qoKur8Hz2pdb8k/Vi+8HdiiMk76c/hsooXUfaxuMW6sjf
3Qug5wTGPtI9CVqOeOHvjWTubEJCvvfxcXED0beqXtrVxXKqAnPpdA6NpT95ehlc
IWqsRp8/1ysy5w==
-----END CERTIFICATE-----
Generated at Fri May 2 03:58:24 2025 by rpki-client